Privacy Policy

Fennec SI (short for Save & Invest, and called Fennec in this policy) is a New Zealand app for saving and investing in one place, available at fennecsi.com. This policy explains what personal information we collect, how we use and protect it, and your rights under the New Zealand Privacy Act 2020.

Fennec is currently in testing. Features change often, and we'll update this policy as they do.

Your account: your email address, how you sign in (password, email link or Google), and profile details you choose to add, such as a username, photo, location or profession. Passwords are handled by our sign-in provider and stored only in hashed form; we never see them.

Money information you add or connect: bank accounts, balances and transactions, categories, budgets, bills, savings goals, KiwiSaver details, home loan figures, investment holdings, watchlists, price alerts, and (if you use the Business section) invoices and business settings.

Bank connections (optional): if you connect your bank, we receive account and transaction data through Akahu, a New Zealand open-banking provider, with your consent. Access is read-only: Fennec can't move money or make payments, and we never receive your bank login.

Gmail (optional, Premium): if you connect Gmail, Fennec has read-only access to find bills and invoices. Matching emails are read to pull out the bill details (sender, amount, due date and reference), and we store those details, not your emails. You can disconnect at any time.

Broker statements (optional, Premium): if you verify your portfolio, the statement you upload is read to confirm your holdings and isn't kept after verification.

Rates notices (optional): if you upload a rates notice or revaluation letter on the Home Loan page, it's read to find your council valuation and isn't kept. Only the values you choose to save are stored.

Partner sharing (optional): if you link with a partner, we record the link and what you've chosen to share with them.

Community: posts and comments you publish, and, if you verify your portfolio, your leaderboard entry.

Feedback: messages you send with the Feedback button, any screenshot you attach, the page you were on, and your browser type.

Usage and technical data: how many AI requests you've made (to apply plan limits), when you last used the app, and standard server logs, which include IP addresses.

• To run Fennec for you: show your money in one place, sync connected accounts, and send reminders and alerts you've asked for
• To produce AI answers, analysis and summaries based on your own figures
• To share what you've chosen with a linked partner
• To apply plan features and limits, and handle Premium requests
• To send account emails (sign-in links, password resets, alerts) and reply to feedback
• To keep Fennec secure, fix problems, and prevent fraud and abuse

We don't sell your personal information, and we don't use it for advertising.

Your information is stored under your account, and our database only lets a signed-in person read or change their own records. Other Fennec users can't see it, except:

• accounts, bills and goals you choose to share with a linked partner
• community posts, which other users can read
• the leaderboard, which shows your username and percentage performance, never dollar amounts

Fennec's administrator can see account emails, usernames, plans and AI usage counts to run the service. The admin tools don't show anyone's accounts, transactions or investments.

Fennec's AI features use Anthropic (Claude) and Google (Gemini). When you use one, we send the provider what it needs for that answer: for example your question and a summary of the relevant figures, a holding you've asked to analyse, the text of a bill email, a rates notice you've uploaded, or a broker statement you've uploaded for verification. We don't send your password or bank login.

We use these providers through their business APIs, under their terms for data handling. We don't use your information to train AI models. AI answers can be wrong, and they're general information, not financial advice.

We use these providers to run Fennec. Each gets only what it needs for its part:

• Supabase: database, sign-in and file storage (hosted on Amazon Web Services in Sydney, Australia)
• Vercel: hosts the website
• Railway: hosts the server that syncs data and runs AI requests
• Akahu: bank and investment account connections
• Toitū Te Whenua LINZ: looks up property details and council valuations for the address you enter on the Home Loan page
• Anthropic and Google: AI processing; Google also provides Google sign-in and the Gmail connection
• Resend: sends account, alert and feedback emails
• Finnhub and Yahoo Finance: market prices and news; we send them share codes only, never personal information

Some of these providers store or process information outside New Zealand, including in Australia and the United States. We choose providers that protect information in ways comparable to the Privacy Act.

Information is encrypted in transit (HTTPS). Bank and Gmail connection keys are encrypted at rest. Database rules keep each person's records to themselves, and you can turn on two-factor sign-in in Settings. Bank access is read-only. No system is completely secure, so please use a strong, unique password, and tell us straight away if you think your account has been accessed by someone else.

We use cookies set by our sign-in provider to keep you signed in. Your browser also stores a few preferences, such as light or dark theme and cards you've hidden. We don't use advertising or tracking cookies.

We keep your information while your account is open. Deleting your account in Settings removes your data straight away, apart from bills and goals you shared with a linked partner, which stay with them. Copies in backups and server logs are removed as those expire. We may keep information for longer only where the law requires it.

Under the Privacy Act 2020 you can ask to see the personal information we hold about you and ask us to correct it. You can delete your account at any time in Settings, and disconnect your bank or Gmail whenever you like. To make a request, email support@fennecsi.com. If you're not happy with how we've handled your information, you can complain to the Office of the Privacy Commissioner.

Fennec is for people aged 18 and over. If you think someone under 18 has an account, contact us and we'll delete it.

We'll update this page when Fennec changes how it handles information, and tell you by email or in the app before any significant change takes effect.

Privacy questions or requests: support@fennecsi.com